[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbAalAC4xxJ4CvfEyzmcgpYjWLa0M35A-uOGtUx-ZzMA":3,"g5a-ex:squirrelmail\u002Fgpg_plugin@*":99,"g5a-family:squirrelmail\u002Fgpg_plugin":101},{"success":4,"data":5},true,{"product":6,"versions":27,"topVulnerabilitiesByEpss":32,"kevVulnerabilities":76,"seoMetadata":77,"meta":96},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":26},"squirrelmail","gpg_plugin",4,8,0,"2007-07-15",[14,18,21,23],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.1",1,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"2.0",5,{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},"2.1",{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"2.1_dev",2,"Gpg Plugin by Squirrelmail is a technology product with 4 tracked versions and 8 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[28,29,30,31],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},[33,41,48,53,57,63,67,72],{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":40},"CVE-2003-0990","The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters in the \"To:\" field.","2004-01-20",7.5,"v2","High",0.28792,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":38,"severity":46,"isKev":17,"epssScore":47},"CVE-2005-1924","The G\u002FPGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the fpr parameter to the deleteKey function in gpg_keyring.php, as called by (a) import_key_file.php, (b) import_key_text.php, and (c) keyring_main.php; and (2) the keyserver parameter to the gpg_recv_key function in gpg_key_functions.php, as called by gpg_options.php.  NOTE: this issue may overlap CVE-2007-3636.","2005-12-31",9.3,"Critical",0.10263,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":52},"CVE-2007-3636","Multiple unspecified vulnerabilities in the G\u002FPGP (GPG) Plugin 2.1 for Squirrelmail allow remote attackers to execute arbitrary commands via unspecified vectors.  NOTE: this information is based upon a vague pre-advisory from a reliable researcher.","2007-07-10",0.03077,{"cveId":54,"description":55,"publishedDate":12,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":56},"CVE-2007-3778","The G\u002FPGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the messageSignedText parameter to the gpg_check_sign_pgp_mime function in gpg_hook_functions.php.  NOTE: a parameter value can be set in the contents of an e-mail message.",0.02667,{"cveId":58,"description":59,"publishedDate":12,"cvssScore":60,"cvssVersion":38,"severity":61,"isKev":17,"epssScore":62},"CVE-2006-4169","Multiple directory traversal vulnerabilities in the G\u002FPGP (GPG) Plugin 2.0, and 2.1dev before 20070614, for Squirrelmail allow remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the help parameter to (1) gpg_help.php or (2) gpg_help_base.php.",5.5,"Medium",0.01617,{"cveId":64,"description":65,"publishedDate":51,"cvssScore":66,"cvssVersion":38,"severity":61,"isKev":17,"epssScore":62},"CVE-2007-3634","Unspecified vulnerability in the G\u002FPGP (GPG) Plugin 2.0 for Squirrelmail 1.4.10a allows remote authenticated users to execute arbitrary commands via unspecified vectors, possibly related to the passphrase variable in the gpg_sign_attachment function, aka ZD-00000004.  this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.",6.5,{"cveId":68,"description":69,"publishedDate":12,"cvssScore":70,"cvssVersion":38,"severity":61,"isKev":17,"epssScore":71},"CVE-2007-3779","PHP local file inclusion vulnerability in gpg_pop_init.php in the G\u002FPGP (GPG) Plugin before 20070707 for Squirrelmail allows remote attackers to include and execute arbitrary local files, related to the MOD parameter.",4.3,0.01192,{"cveId":73,"description":74,"publishedDate":51,"cvssScore":70,"cvssVersion":38,"severity":61,"isKev":17,"epssScore":75},"CVE-2007-3635","Multiple unspecified vulnerabilities in the G\u002FPGP (GPG) Plugin before 2.1 for Squirrelmail might allow \"local authenticated users\" to inject certain commands via unspecified vectors. NOTE: this might overlap CVE-2005-1924, CVE-2006-4169, or CVE-2007-3634.",0.00262,[],{"title":78,"metaDescription":79,"keywords":80,"structuredData":81},"Gpg Plugin by Squirrelmail - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Gpg Plugin by Squirrelmail covering 4 versions with 8 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Gpg Plugin vulnerabilities, Gpg Plugin security, Gpg Plugin CVE, Squirrelmail Gpg Plugin, Gpg Plugin threat intelligence, Squirrelmail security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":82,"@type":83,"name":84,"description":79,"url":85,"manufacturer":86,"applicationCategory":90,"softwareVersion":91,"mainEntity":92},"https:\u002F\u002Fschema.org","SoftwareApplication","Gpg Plugin","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsquirrelmail\u002Fgpg_plugin",{"@type":87,"name":88,"url":89},"Organization","Squirrelmail","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsquirrelmail","Security Software","4 versions tracked",{"@type":93,"name":94,"description":95,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Gpg Plugin Security Vulnerabilities","Security vulnerabilities affecting Gpg Plugin by Squirrelmail",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":97,"apiVersion":98},"2026-10-17T19:58:27.065Z","3.0",{"rows":100,"total":11,"capped":17,"failed":11},[],[]]